In the aftermath of a devastating $292 million exploit, Aave has rallied several major cryptocurrency firms to collaborate on a recovery initiative aimed at stabilizing the decentralized finance (DeFi) market. The effort, known as 'DeFi United', led by Aave service providers, focuses on replenishing the collateral backing of rsETH, a yield-bearing ether (ETH) derivative token at the center of the exploit. Aave has announced that multiple participants have already committed to supporting this endeavor.
The first to offer aid was Lido Finance, a staking provider, whose ecosystem contributor, Lido Labs Foundation, proposed allocating up to 2,500 stETH, valued at approximately $5.7 million, into a dedicated relief fund. This allocation is intended to reduce the shortfall in rsETH backing and prevent forced liquidations across lending markets. Subsequently, EtherFi proposed a plan involving 5,000 ETH to 'protect users and prevent bad debt' across DeFi. Aave's founder, Stani Kulechov, also pledged a 5,000 ETH contribution, stating, 'Aave is my life's work, and we are working tirelessly to find the best possible outcome for our users.' Kulechov expressed his commitment to resolving the issue and normalizing market conditions as soon as possible.
Aave plans to announce additional commitments once they are formalized. The initiative follows the largest crypto exploit of the year, which sent shockwaves through DeFi lending markets. The incident originated from a vulnerability in KelpDAO's integration with LayerZero, where an attacker exploited the bridge's messaging system to mint 116,500 unbacked rsETH tokens. Instead of selling these tokens, the attacker used nearly 90,000 rsETH as collateral on Aave, borrowing approximately $190 million in ETH and other assets across Ethereum and Arbitrum.
This left Aave with impaired collateral, triggering a rush of deposit withdrawals as lenders sought to secure available funds. The total value of assets on Aave plummeted by $10 billion in the wake of the incident.
According to Aave's incident report, the total shortfall is estimated to be over 112,000 rsETH. Prior to the DeFi United initiative, there were early attempts at containment.
Arbitrum's security council had frozen 30,766 ETH, worth roughly $71 million at the time, linked to the exploit. However, the remaining stolen funds were bridged and swapped into bitcoin via Thorchain, complicating the recovery process. The current effort prioritizes stabilizing the system through a coordinated bailout to recapitalize rsETH and mitigate losses, rather than focusing on recovering the stolen funds.